Vulnerabilities > CVE-2012-3112 - Remote Solaris vulnerability in SUN Sunos 5.10

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
sun
nessus

Summary

Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect integrity via unknown vectors related to Solaris Management Console.

Vulnerable Configurations

Part Description Count
OS
Sun
1

Nessus

  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_X86_141105.NASL
    descriptionVulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Solaris Management Console). The supported version that is affected is 10. Difficult to exploit vulnerability allows successful unauthenticated network attacks via HTTP. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data. This plugin has been deprecated and either replaced with individual 141105 patch-revision plugins, or deemed non-security related.
    last seen2019-02-21
    modified2018-07-30
    plugin id59234
    published2012-05-23
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=59234
    titleSolaris 10 (x86) : 141105-04 (deprecated)
    code
    
    #
    # (C) Tenable Network Security, Inc.
    #
    # @DEPRECATED@
    #
    # Disabled on 2018/03/12. Deprecated and either replaced by
    # individual patch-revision plugins, or has been deemed a
    # non-security advisory.
    #
    include("compat.inc");
    
    if (description)
    {
      script_id(59234);
      script_version("1.5");
      script_cvs_date("Date: 2018/07/30 13:40:14");
    
      script_cve_id("CVE-2012-3112");
    
      script_name(english:"Solaris 10 (x86) : 141105-04 (deprecated)");
      script_summary(english:"Check for patch 141105-04");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"This plugin has been deprecated."
      );
      script_set_attribute(
        attribute:"description",
        value:
    "Vulnerability in the Solaris component of Oracle Sun Products Suite
    (subcomponent: Solaris Management Console). The supported version that
    is affected is 10. Difficult to exploit vulnerability allows
    successful unauthenticated network attacks via HTTP. Successful attack
    of this vulnerability can result in unauthorized update, insert or
    delete access to some Solaris accessible data.
    
    This plugin has been deprecated and either replaced with individual
    141105 patch-revision plugins, or deemed non-security related."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://getupdates.oracle.com/readme/141105-04"
      );
      script_set_attribute(
        attribute:"solution", 
        value:"n/a"
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:sun:solaris");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2012/05/21");
      script_set_attribute(attribute:"plugin_publication_date", value:"2012/05/23");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2012-2018 Tenable Network Security, Inc.");
      script_family(english:"Solaris Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/Solaris/showrev");
    
      exit(0);
    }
    
    exit(0, "This plugin has been deprecated. Consult specific patch-revision plugins for patch 141105 instead.");
    
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_141104.NASL
    descriptionVulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Solaris Management Console). The supported version that is affected is 10. Difficult to exploit vulnerability allows successful unauthenticated network attacks via HTTP. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data. This plugin has been deprecated and either replaced with individual 141104 patch-revision plugins, or deemed non-security related.
    last seen2019-02-21
    modified2018-07-30
    plugin id59285
    published2012-05-29
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=59285
    titleSolaris 10 (sparc) : 141104-04 (deprecated)
    code
    
    #
    # (C) Tenable Network Security, Inc.
    #
    # @DEPRECATED@
    #
    # Disabled on 2018/03/12. Deprecated and either replaced by
    # individual patch-revision plugins, or has been deemed a
    # non-security advisory.
    #
    include("compat.inc");
    
    if (description)
    {
      script_id(59285);
      script_version("1.5");
      script_cvs_date("Date: 2018/07/30 13:40:14");
    
      script_cve_id("CVE-2012-3112");
    
      script_name(english:"Solaris 10 (sparc) : 141104-04 (deprecated)");
      script_summary(english:"Check for patch 141104-04");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"This plugin has been deprecated."
      );
      script_set_attribute(
        attribute:"description",
        value:
    "Vulnerability in the Solaris component of Oracle Sun Products Suite
    (subcomponent: Solaris Management Console). The supported version that
    is affected is 10. Difficult to exploit vulnerability allows
    successful unauthenticated network attacks via HTTP. Successful attack
    of this vulnerability can result in unauthorized update, insert or
    delete access to some Solaris accessible data.
    
    This plugin has been deprecated and either replaced with individual
    141104 patch-revision plugins, or deemed non-security related."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://getupdates.oracle.com/readme/141104-04"
      );
      script_set_attribute(
        attribute:"solution", 
        value:"n/a"
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:sun:solaris");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2012/05/21");
      script_set_attribute(attribute:"plugin_publication_date", value:"2012/05/29");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2012-2018 Tenable Network Security, Inc.");
      script_family(english:"Solaris Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/Solaris/showrev");
    
      exit(0);
    }
    
    exit(0, "This plugin has been deprecated. Consult specific patch-revision plugins for patch 141104 instead.");
    
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_X86_141105-04.NASL
    descriptionVulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Solaris Management Console). The supported version that is affected is 10. Difficult to exploit vulnerability allows successful unauthenticated network attacks via HTTP. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data.
    last seen2020-06-01
    modified2020-06-02
    plugin id108024
    published2018-03-12
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108024
    titleSolaris 10 (x86) : 141105-04
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_141104-04.NASL
    descriptionVulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Solaris Management Console). The supported version that is affected is 10. Difficult to exploit vulnerability allows successful unauthenticated network attacks via HTTP. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data.
    last seen2020-06-01
    modified2020-06-02
    plugin id107526
    published2018-03-12
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/107526
    titleSolaris 10 (sparc) : 141104-04